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Abstract Extensive studies of Boolean functions are carried in many fields. The 
Mobius transform is often involved for these studies. In particular, it plays a cen¬ 
tral role in coincident functions, the class of Boolean functions invariant by this 
transformation. This class - which has been recently introduced - has interesting 
properties, in particular if we want to control both the Hamming weight and the 
degree. We propose an innovative way to handle the Mobius transform which al¬ 
lows the composition between several Boolean functions and the use of Shannon 
or Reed-Muller decompositions. Thus we benefit from a better knowledge of coin¬ 
cident functions and introduce new properties. We show experimentally that for 
many features, coincident functions look like any Boolean functions. 

Keywords Boolean functions, Mobius transform. Coincident functions, Shannon 
and Reed-Muller decompositions 


1 Introduction 


Numerous studies with Boolean functions have been conducted in various fields 


like cryptography and error correcting codes (Carlet (20101), Boolean circuits 
and Boolean Decision Diagram (Bryant (1986)), Boolean logic (Boole (18481) or 
constraint satisfaction problems (Creignou et al. (20011). There are many ways 
to represent a Boolean function which depends of the domain. For instance, on 
propositional logic one usually uses the conjunctive normal form or the disjunctive 
normal form, while we often use the BDD in Boolean circuits. Most of the time 
these studies involve several criteria. In cryptography, the (algebraic) degree and 
the (Hamming) weight are crucial criteria. 


M. Barbier ■ Hayat Cheballah ■ J.-M. Le Bars 
ENSICAEN - UNICAEN - GREYC 
E-mail: morgan.barbier@ensicaen.fr 
E-mail: hayat.cheballah@gmail.com 
E-mail: jean-marie.lebars@unicaen.fr 
























2 


Morgan Barbier et al. 


Unfortunately, the best representation for the degree is the Algebraic Normal 
Form (sum of monomials), while the weight requires the truth table (sum of 
minterms). Thus the Reed-Muller decomposition (or expansion) allows us to 
perform recursive decomposition (Kasami and Tokura (19701), enumeration and 
random generation among the degree whereas the Shannon decomposition (or 
expansion) does the same task among the weight Shannon ||1949 1 shows the 
switching network interpretation of this identity, but (Boole ( 1854[ )) will be the 
first to mentioned it. These decompositions allow us to decompose a Boolean 
function with n variables into two Boolean functions with n — 1 variables or 
equivalently to build a Boolean function with n variables with two Boolean 
functions with n — 1 variables. 


Since these decompositions appear to be orthogonal, it seems unreachable to 
consider them simultaneously or to perform enumeration or random generation 
with both criteria. This is why we propose the study of coincident functions for 
which we have a correspondence between the monomials and the minterms. 


In Pieprzyk et al. ( 2011| , the author dehned for the first time the class of 
coincident functions, the boolean functions invariant by Mobius transform (see 


Guillot (1999) phd Thesis for a deep study of this property). We revisit their 


results with a new point of view more convenient, in particular we introduce a 
Mobius transform conditioned by the number of variables which gives a recursive 
(Reed-Muller and Shannon) decomposition of Mobius transform, linking the two 
decompositions. We investigate the distribution of degree and weight and provide 
a uniform random generator of these functions. We also beneht to the structure 
of lattice of the valuations to study the monotonic coincident functions and to 
provide a complete construction of symmetric coincident ones. 


The paper is organized as follows. We recall the basic dehnitions related to 
boolean functions and to Mobius transform in Section We introduce our new 
point of view and the resulting properties concerning Mobius transform and co¬ 
incident in Section Thanks to lattices, we exhibit, in Section links between 
coincident functions with monotonic and symmetric functions, and also the ran¬ 
dom generation of coincident functions. Finally, we propose in Section a set of 
experiment resulting on coincident functions. 


2 Definition and first properties of Boolean functions and Mobius 
transform 

2.1 Boolean function 

Let Tn be the set of the boolean functions with n variables. Monomials and 
minterms play a role of canonical element in the different writings. 

Definition 1 (Monomials and minterms) Let us to denote x = {xi,... ,Xn)- 
For any u = {ui,... ,Un) £ F 2 > will be denoted the monomial . The 

minterm Mu is the Boolean function with n variables defined by 

, .r / \ f 1, if u = a; 

otherwise. 
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The two following definitions provide two different point of views what we wish 
to link. 

Definition 2 (Algebraic Normal Form — ANF) A boolean fnnction / can be 
viewed as the exclusive snm of a subset of the set of monomials in variables 

X ±, • . ., Xn ■ 

/ = 0 

U^J-2 

Definition 3 (Truth table or valuations of /) A boolean fnnction / can be 
viewed as the exclusive sum of a subset of the set of minterms in variables 

Xi , . . ., Xn . 

/ = 0 PuMu. 

Notation 1 Let u and w £ F^. We will write u < v when Ui < Vi, for any 
i € {1,..., n} and u ^ v when u <v and u ^ v. 

The previous partially ordered set provides connection between these notions. 


Proposition 1 Let m £ F 2 , then 

x“ = 0M„. (1) 

u-^v 

Proof Let / = a;“ and a £ F 2 , f{a) = 1 if and only if = 1 for all i snch that 
= 1, ie M ^ a. Hence / = My 

Proposition 2 Let m £ F 2 , then 

M„ = 0a;L (2) 

u-^v 

Proof het u = {ui,...,Un) £ F 2 . It is easily seen that Mu is equal to the 
product n”=i(®i ® Wf ® !)• Let Io(u) = {i £ n} : = 0} and 

h{u) = {i G {1,n} ■. Ui = 1}, it follows 

= riie/iiii) 

Notation 2 There are several natural ways to encode f by a binary word of length 2". 

We will choose the following natural encodings directly derived by the previous def¬ 
inition. 

T(/) =ti...f2", 

where tf^, with ^11=1 2*”^ the 2-adic representation of k and tk = Pu- 

Mf) = ttl • • - 02", 


where a^. = 

We denote by if the bijection if{A{f)) = T{f). 


The two dehnitions below introduce crucial parameters of a boolean function. 
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Definition 4 (Hamming weight) Let / £ Tn be a boolean function, we will write 
whU) the (Hamming) weight of /, ie the nnmber of 1 of T(/). 

Definition 5 (Aigebraic degree) Let / £ J-n be a boolean fnnction, we will write 
d{f) the (algebraic) degree of /, ie the maximal degree of the monomials in the 
ANF of /. 

While the Reed-Muller decomposition is related to the algebraic normal form, 
the Shannon one is associated to trnth table. 

Definition 6 (Reed-Muiler decomposition) Let / £ J-n- The Reed-Muller de¬ 
composition, consists in rewriting the boolean fnnction as 

f = fn® XnfR, 

where fR,ffi £ J-n-i and are nnique. 

Definition 7 (Shannon decomposition) Let / £ J^n- The Shannon decomposition, 
consists in rewriting the boolean function as 

/ = (l+a;„)/s©a:„/s, 

where fs,fs ^ ^n-i and are unique. 

Remark 1 Let / £ J^n- Clearly, we have by identification = fg and = fs®fs- 

Remark 2 The Shannon decomposition is the natural decomposition for manipu¬ 
lating the minterms since T(/) = T{fg) \ T{fg), where | denotes the concatenation. 
This trivially implies 

wnif) = wnifs) + wnifs)- 

Remark 3 The Reed-Muller decomposition is the natural decomposition for ma¬ 
nipulating the monomials since A{f) = A{f^) \ A{f}j). This implies 

d{f) = max{d{fR),d{fR) -f 1). 

Notation 3 From now one, we will write On the valuation of Flf (0,..., 0) and On 
(resp. In) the Boolean function with n variables which takes the value 0 (resp. \) for 
any valuation. 


2.2 Mobius transform 


The Mobius transform is at the heart of this article. 


Definition 8 (Mobius transform) The Mobius transform, noted p is dehned by 
the following bijection 


P '■ J- n 

f 



Tn 

m(/), 


such that, for any / £ Tn 

/ = 0 h{f){u)x^- 
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The statements of the following proposition derives directly from the definition of 
the Mobius transform. 


Proposition 3 .'Pieprzyk et al. 2011 Theorem 1 and Lemma 3) Let f,g € Tn and 

uen, 

oif ® 5 ) = oif) ® oig) and p(/)(0„) = /(0„). 


Proof Both results are direct implication of the definition of 
let / = 0„eFj and g = («)*”• Then 

/® 5 = 0„6Fj(/^(/)(«) ®m( 5) («))*“ and gif ® g){u) = p(/)(u) © p(g){w). 

Therefore let a = On, a“ = 0 for any a ^ u, then /(On) = p(/)(a). 


Proposition 4 : Pieprzyk et al. 

/i(Mn) =1“. 


2011 


Lemma 2) Let u G ¥ 2 , then p{a;“) = Mu and 


Proof Let u = {ui, ...,Un) G Fj and f = . f = 0„gFj Then p{/)(v) 

is equal to 1 if u = tt and equal to 0 otherwise, which is the definition of Mu- 

Mu = 0„^„ 2 ;” by 0 
t{Mu) = 0„^„p{*") 

= ®u^uMu 

= by 1^. 

Proposition 5 The Mobius transform is a involution, ie p^(/) = / and p(/) = g if 
and only if p{g) = f. 


Proof 

f = 0„GFjM(/)(t‘)a:“ 

oif) = 0„gfj/^(/)W^« 

P^U) = 0„GFjM(/)(t‘)a:“. 


3 New properties on Mobius transform and coincident functions 

Let us start this section by the following remark, which is one of main statement 
of this paper. 

Notation 4 Let f G Tn, we will denote by P{f) the polynomial form of f. 

Remark 4 The polynomial form contains only the variables which play a role for 
the evaluation of the function. We will denote by indeterminates these variables. 
We may increase the numbers of variables by keeping the same number of inde¬ 
terminates. Let fn G Tn then for all fc > 0, it exists fn+k £ Tn+k, such that 
fn and fn+k share the same polynomial form, P{fn) = P{fn+k)- Furthermore 
T{f 2 +k) = T(/ 2 ) * 2^ (we repeat 2^ times the word T(/ 2 )). 

For instance, the Boolean function with two variables /2 such that r(/ 2 ) = 0110 
has the polynomial form P = P(/ 2 ) = 2:1 © 2:2 and /$ such that T{f^) = 01100110 
satisfies P(/ 3 ) = 2:1 © 2 : 2 . 
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We were wondering if the Mobius transforms of function see as n variables and 
n + fc are equals. Let /„ G Tn and /m € Tm such that n < m and P{fn) = P{fm)- 
Does the following equality holds? 

M(/n) = (3) 

We propose to look on a particular toy example. 

Example 1 Let /i = xi © 1 G be a boolean function with one indeterminate 
and /2 = © 1 € be the same function see as a boolean function with two 

variables. Very simple computations give us that p(/i) = 1 and /r(/ 2 ) = *2 © 1- 


3.1 New insights of the Mobius transform 

The example provides a counterexample (§. Then we have to use the Mobius 
transform carefully if we manipulate the polynomial form of a Boolean function. 
In this setting, we introduce the following notation. 

Notation 5 Let f G Pn be a Boolean function with n variables. We will write fJ.n{f) 
instead of n{f). 

Exampleimplies p(a:i © 1) = © 1) = 1 and p 2 {xi © 1) = *2 © 1- In other 

words, the Mobius transform depends on the variables, not on the indeterminates. 

We obtain the following result, which permits us to manipulate the Mobius 
transform easily, hence this is one of key ingredient. 

The following theorem contains three key ingredients to manipulate properly 
the Mobius transform. 

Theorem 1 Let f G Pn-i- We have 


hn{f) = (1 © a;„)p„-i(/). 

(4) 

ian{Xnf) = Xntln—lif), 

(5) 

Pn((I © Xn)f) = Hn-l{f). 

(6) 


Proof It is straightforward to prove Equation from the definition of the Mobius 
transform. Indeed, we can see the computation of the Mobius transform as an 
interpolation problem. Since the coefficients of the monomials where occurs Xn+i 
must be null, thus the statement. 

The definition of the Mobius transform give us 

Pn(®n/) = Mn{/) “ h-n—l{f) 

= (1 © Xn)p,n-l{f) - hn-l{f) 

= Xnp,n—l{f), 

which is exactly Equation ©• 

Let us to compute Equality 

Pn((I © Xn)f) = tinif) © p,n{Xnf) 

= (I © Xn)pLn-l{f) © XnfJ.n-l{f) 

= Mn-l{/)- 
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The Reed-Muller decomposition is related to algebraic normal form, whereas 
the Shannon one is related to truth table. Since the Mobius transform allows us 
to switch from one to the other; it is natural to see the relationship between the 
previous decompositions and the Mobius transform. 


Proposition 6 /Pieprzyk et al.^2011\ Theorem 5). Let f G J^n be a boolean function 
and £ J'n-i be the terms of the Reed-Muller decomposition. Then 


f-nif) = {1 ® Xn)fJ.n-lifR) ® XuRn-lifli)- 


Proof 


Tn{f) — Tnifn) © Tn{xnf]i) 

= (1 © © 2:nPn-l(/A)- 


Proposition 7 Let f G J-n be a boolean function and fg^fg G L-n-i be the terms of 
the Shannon decomposition. Then 


Tn{f) = p„-l(/s) ©XnMn-l(/s)- 


Proof 

h'nif) = Rn (^(1 © Xn)fs^ © Rn{Xnfs) 

= (1 © Xn)tJ.n-l (^fs'j © XnpLn-1 © XnRn-1 (^/s) 

= Mti-i(/s) © XnRn-lifs) 

We hnd again that the Reed-Muller decomposition of the Mobius transform is 
the Mobius transform of the Shannon decomposition; and vice versa. 


The first step to try to make a link between the algebraic degree of a boolean 
function and its hamming weight is given by the following proposition. 

Proposition 8 fPieprzyk et al.\2011\ Theorem 7) Let f G Tn \ {On}. Then 


deg(/) + deg(^„(/)) > n. 

Proof Let / = /{^ © a:n/^. By Proposition]^ 

Tn{f) = Rn-lifn) ® Xn{hn-l{fR) ® Tn-l{fR)) 

= A‘n-l(/i?) © Xnihn-lifR © /A))- 


Since / ^ On, fR and cannot be null in same time, then it is easily seen that 
the property holds for n = 1. 

Let n > 1. Assume that the property holds for n — 1. 

Case 1) deg(/]^) ^ deg{/]j). Then 

deg(/fl © /A) = max(deg(/fl),deg(/H)) < deg(/). 


Since deg{f%) jk deg(/jj), then deg(a;„p„_i © /ij)) > deg{p„_i {f% © /]j)), so 
we deduce 


deg(/) + deg(p„(/)) > deg}/^ © f}j) + deg(p„_i(/^ © /^)) + 1 

> n — 1 + 1 by hypothesis of recurrence 
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Case 2) Hence deg(/^) = deg(/jj); moreover deg{/) = deg(/]^) + 1 

and deg(/i„(/)) > deg(/i„_i{/]^)), and by hypothesis of recurrence, 
deg(/fl) + deg{p„_i(/)j)) > n - 1, hence deg(/) + deg{p„(/)) > n. 

Always with the same intended target: draw a link between algebraic degree and 
the Hamming weight of a boolean function; the following result gives us the prob¬ 
ability that the Mobius transform has degree n. 

Proposition 9 Let f € Tn built uniformly at random. Then 


Pr(deg(/i„(/)) = n \ deg{/) = n) = Pr(deg(/r„{/)) = n | deg(/) < n) 

= Pr(deg(p„(/)) =n) = \. 

Proof One may easily check the property for n = 1. Assume the property holds for 
n — 1. 

Let / = /fl © Xnffj built uniformly at random. Then deg(/) = n if and only 
if xi.. .Xn occurs in tW ANF of /. Since it is the case for half of the Boolean 
functions, Pr(deg{/) = n) = On the one hand deg(/) = n if and only if 
d(/^) = n — 1 and on the other hand, by Proposition]^ deg{pn(/)) = n if and 
only if deg(p„_i(/]^ © f^)) = n - 1. Hence 

Pr(deg(/i„(/)) = n | deg(/) = n) = Pr(deg(At„_i (/^ 0 /Jj)) = n - 1 | deg(/jj) = n-l). 

Moreover, deg(/r„_i(/^ © /jj)) = n - 1 if deg(Mn-i(/fl)) = n - 1 and 
deg(/i„_i(/]j)) < n- 1 or deg(^„_i(/jj)) < n - 1 and deg{p„_i(/]j)) = n - 1. 

The degree of and p„_i(/jj) are clearly independent and 

Pr(deg{p„_i(/)j.)) = n - 1) = i. It follows 

Pr(deg(/r„_i(/g)) = n - 1 and deg(^n_i(/fl)) < n - 1| deg(/fl) = n - 1) 

= Pr(deg(/r„_i(/)^)) = n - l)Pr(deg{p„_i(/]j)) < n - 1 | deg(/]j) = n - 1) 

— 1 1 — 1 

— 2 ' 2 “ 4 ‘ 


Similarly, we find 

Pr(deg(/r„_i{/)i)) < n - 1 and deg(p„_i(/]j)) = n - 1| deg{/fl) = n - 1) = 


Hence Pr(deg(Mn-i(/fl © /A)) = n - 1 | deg(/]j) = n - 1) = i. 


The following proposition can be view as a new decomposition related to Mo¬ 
bius transform. 


Proposition 10 \Pieprzyk et al 2011 Lemma 7). Let n 


We will denote respectively the tuples x = {xi,..., Xn) , y 
z = {xk+i,... ,Xn). Let fi{y) € Tk, f2{z) € T^-k and f{x) 
9{x) = fi{y) © f 2 {z). Then 


N and 0 < k < n. 
{xi, ..., Xk) and 
fi{y) ■ f 2 {z) and 


Tn{f{x)) = 0n-k{f2{z)) ■ Mfe(/l (?/)); 

Pn{g{x)) = n”=fe+l(l® *i)/^fc{(/l(s/)) ® ni=l(l® ®*)Pn-fc(/2(«))- 
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Proof Let u = ,u„) G F*. By applying (|^ and ^ of Proposition]^ it 

follows 

Mn-fe(z”/i(y)) = Mu{z) ■ ^J.k{h{y))■ 

Hence 

Mn(/(*)) = 0„6FJ ^“( 2 ) • Mfe(/l(y)) 

= Mn-fc(©ueFj ^ ) ■ Mfc(/i(2/)) 

= Mn-/c(/ 2 (z)) • fj-kihiy))- 

First fin{g{x)) = fkn{fi{y)) ©Pn(/ 2 ( 2 ))- Furthermore of Proposition implies 
Pn{fl{y)) = nr=/c+l(l ® ®*)Mfc((/l(y)) and fln{f 2 {z)) = IlLl )Mn-fc (/2 ( 2 ) ) • 


3.2 Coincident functions 


The notion of coincident function was previously introduced in [Pieprzyk et al.| 
(2011). A coincident function is a boolean function which is equal to its Mobius 
transform. 


Definition 9 (Coincident function) Let / € J-n, f is called coincident if and only 
if 


/ = yn{f). 


We will denote by Cn the set of coincident functions with n variables. 


For this particular subset of boolean functions the monomial and the associated 
minterms are directly related; this is the result of the following proposition. Let 
f G iFn, hy Proposition]^ / © gn{f) € Cn- Here we propose an improvement of 


(Pieprzyk et al.| 


2011 


Lemma 11). 


Proposition 11 Let m € F 2 and hu = 2 ;“ © Mu- Then hu is coincident and 


hu = ^ x" = ^ Mv- 

U^V U^V 

Proof Since fin{x'^) = Mu, hu = © jJ-nix'^) is coincident. By 0, M„ = x'^ 

hence hu = 0„^^a;’'. 

Remark 5 We propose another point of view of the previous proposition: let 
fk = nt the function with all multiples of f^, except f^ itself, give a co¬ 
incident function; that is 


/fc 1® n (i®*») 

\ i=k + l 

Hence for particular coincident functions, it becomes trivial to compute their ham¬ 
ming weight. 

Corollary 1 Let k = w^ia)- R follows w^iha) = 2”“^ — 1. 

Coincident functions had a lower bound on its algebraic degree, this is a trivial 
consequence from Proposition]^ 
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Proposition 12 \Pieprzyk et al.^2011 Theorem 31) Let h G Cn \ {0} be a coincident 
function with n variables. Then a lower bound on its algebraic degree is 

deg{ft) > 

Proof Since /i is a coincident function and Proposition we have that 


deg(/i) + deg(/i(/i)) > n 


2 deg(h) > n 
deg(h) > 


Notation 6 Let f € Tn- We define the operators ipn and Cn by 


Tnif) = /©Mn(/) 

Cn{f) = {f e : Mf) = Mf)} ■ 


3.3 A construction of coincident functions 

The foiiowing proposition gives us a simpie way to buiid a coincident functions. 

Proposition 13 \Pieprzyk et al.\2011\ Theorem 24) Let h G Cn, there exists a unique 
g G Tn-\ such that 

h = g® Unig) 

= Tn-l{g) © Xnp.n-l{g) 

= (1 © Xn)Tn-l{g) © Xng. 

Proof Let h = hPj^® Xnh\^ G Cn-i- Then p„(h) = © h^f). 

Since h = g,n{h), it foiiows € C„_i and © Tn-i{h]^), which impiies 

h°ji = 'Pn-iihjf). Let g = hence 

g® g-nig) = © (l © xn)h]^ 

= Tn-l{h]i) © Xnh]^ 

= h^® Xnh^R = h. 

Since ipn-iig) = bPpi, we aiso have 

h = g:>n-i{g) ® Xngn-i{g) 

= (1 © Xn)Tn-l{g) © Xng. 

Since we have a one to one correspondence between the Booiean functions with 
n — 1 variabies and the coincident functions with n variabies, we triviaiiy deduce 
that card{Cn) = 2^ ; see 

Cn has a vectoriai space structure. 

Proposition 14 The set Cn is a vectorial space of dimension 2"“^. 

Proof Let hi and /12 £ Cn- We consider fi and /2 £ such that hi = <fin{fi) and 
h 2 = <Pn{/ 2 ). Let h = hi ® / 12 . 

h = gi ©lin(5l) ©52 ©Pn(fl2) = {51 ®g 2 )®gnigi © 52 ), 


(Pieprzyk et ai.|[2011 Theorem 18). We aiso show that 


hence h = tpnifi ® f 2 ). 
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Corollary 2 (Random generation of a coincident function) Let uniform{E) a func¬ 
tion which returns with the uniform distribution an element of a finite set E. The 
following algorithm returns with the uniform distribution a coincident function from 


Algorithm 1: Uniform random generation of a coincident function 
Input: The integer n, the number of variables. 

Output: h £ Cn a. coincident function with n variables. 

begin 

g <— uniform(J^„_i) 

/ 1 - g-nig) 

_ h <- g © / 

return h 


Proposition 15 Let h £ Cn be a coincident function, then h{0n) = 0. 

Proof Let / such that h = Tn(.f), by Proposition § M(/)(0n) = /(On), then 

h{Qn) = 0 . 


Here is a strong connection between the Mobius transform of a boolean function 
and this one of its Reed-Muller decomposition. 

Proposition 16 Let f = f^^Xnfh £ En and hP = ipn-i{f^), h^ = (fin-iifs) then 

Tn{f) = + Xn{h° © /i^ © f'^). 


Proof Let h = ipn{f). Let us to compute h 


h = / © gn{f) 

= /l? ® XnfR © (1 + Xn)pn-l(/A) ® XuPn-lifn) 

= © Xn{h^ © pn-l(/i?)) 

= h°©rn(h°©h^©/^). 


Remark 6 Proposition 
/fl ^ Cn-i{g)- 


13 


and 


16 


imply h° = ifin-i{g) and g 


h^ ® fn, ie 


Remark 7 Let h £ Tn, then h is coincident if and only \i h £ Cn(0). 


Corollary 3 Let gi,g 2 £ En-i, fi £ Cn(gi) and f 2 G Cn{g 2 )- Then 

/i © /2 £ Cn{gi © 52)- 


From the linearity, the Mobius transform of the sum of function is the sum of 
the Mobius transforms. We propose to look on the multiplicativity. 

Proposition 17 \Pieprzyk et al.||g011[ Theorem 7) Let n £ N and 0 < k < n. 
We will denote respectively the tuples x = {xi,...,Xn), y = (xi,..., Xfe) and 
z= (xfc+i,...,Xn). Let fi{y) £ Ek, f 2 {z) £ E^-k and f{x) = fi{y) ■ f 2 {z). Then 
f is coincident if and only if fi and f 2 are. 
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Proof This is a direct application of Proposition 

= M„-/c(/ 2(2)) • Pfc(/l(j/)). 

Clearly if /i and /2 are coincident functions, then ^n{f{x)) = f2{z) ■ fi{y) = f{z) 
and / is a coincident function. Conversely, yn{f{x)) = f{z) implies 

Pn-k{f2[z)) = f2{z) and ykihiv)) = hiv)- 

We exhibit now some constructions of coincident functions available for any 
number of variables. 

Proposition 18 Let n G N* be a positive integer, the boolean functions: 

L Pn(On) = On, 

nr=i**. 

are coincident. 

Proof Let us to prove the three assertions. 

The definition of Mobius transform gives us directly 

For the next assertion]^ we have Y\a=i Xi = = Mi, we conclude by applying 

Proposition]^ 

Concerning the assertior|^ nr=i(l ® and 1 = x°, then 

nr=i(l ®Xi)= P„{1) and 1 = Mn(n”=i(l ® ®*))- Hence 1 ® n"=i(l ® = V5n(l)- 

Since the Mobius transform of a coincident function provides a connection between 
the minterms and the monomials, we deduce the following corollary. 

Corollary 4 Let h be a coincident function, then w{h) = N{h), where N(h) gives the 
number of monomials of the h. 

We introduce now the dual of a coincident function. 

Definition 10 Let h G Cn- The dual of h is the coincident function h* = /i©(pn(l). 

Proposition 19 We have a one to one correspondence between coincident functions 
with odd Hamming weight and even Hamming weight. 

Proof A Boolean function has Hamming weight odd if and only if n"=i occurs 
in its ANF. Let h G C^. It follows A(/) = T{f) = ti...t 2 ^, and wnih) odd if 
and only if =1- Hence we a have partition of Cn = (C^,C^), where Cn (resp. 
Cn) are coincident functions of Hamming weight odd (resp. even) and a one to one 
correspondence between Cn and Cn with h' = Xi, HlLi ^^e coincident 

function which changes the parity of a coincident function. 

Thanks to the previous propositions, we propose to exhibit different coincident 
functions of any number of variables. 

Proposition 20 Table of some coincident functions 

The following words codes table (or equivalently ANF) of coincident functions: 

1 . 0 „ 0 ... 0 ; 

A nr=i**^o...oi,- 
3- i®nr=i(i®®i)^oi...i;_ 

f. i®nr=i(i®®i)®nr=i*j = n"=ia;i <^oi...io,- 
5. VwgF^, 




Properties and constructions of coincident functions 


13 


4 Constructions of coincident functions based on the Boolean lattice 


4.1 Boolean lattice properties of coincident functions 


The set of valuations in n variables forms a Boolean lattice with the partial order 
^ already defined. The process of placing the minterms (or the monomials) which 
appears in a Boolean function over this lattice may be useful for some studies. In 


Guillot (19991 PHD Thesis Boolean lattice is already considered for the study of 


Mobius transform. 

We first provide a new caracterisation of coincident functions. Let n € N, we 
define the complete Boolean lattice Ln = (F 2 , such that, for any u = {ui,..., Un) 
and V = (fi,..., tin) € F 2 , the supremum and the infimum are defined by 


sup{u, v) = UV V = (ui V VI, ... ,Un V Vn); 
inf{u, v) = U /\V = (ui A Vi, . . . , Mn A Vn). 



Fig. 1 The lattices £2 and ■C3. 


000 



111 



u A V 



uV V 


The Boolean lattice dfjin Boolean lattice C{u, v) 
Fig. 2 Isomorphism between Ck and C(u,v). 


The lattice is complete in the sense that any sublattice (W, has the 
supremum u an d the infimum Auew ^"1®° called the n-cube 

(Palmer et al. (1992)). Let u and p G F2 and k = dfi{u V v,u A v). Then 
C{u,v) = {w G F2IM :< w ^ v} is isomorph to C}^ (we remove the identical com¬ 
ponents in u and v), see Fig. 


Definition 11 Let / G Fn, we define Cn{f) = iU,<) the sublattice of Cn by 
U = support{f) = {m G F 2 |/(w) = 1}. 
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Then / can be viewed as a 2 coloring of the 

Let a= (ai,..., a„) and / € Tn, f{a) = 0 Since a“ = 0 for any 

u such that u a and a“ = 1, it follows 

/(«) = 0Mn{/){w). (7) 

u^a 


Proposition 21 \Pieprzyk et al.\2011 Theorem 23) Let f G J^n be a boolean function 
with n variables. Then f is coincident if and only if 


0 /(«) = 0, for any u G ¥ 2 - 


( 8 ) 


V^U 

In other words, for each u G F 2 , we have an even number of v < u such that f{v) = 1. 

Proof Let / be a coincident function, then f(u) = f{v) = /(w) f{v). 

Proposition 22 Recall that ha = (B Ma, for any a G F 2 • Then (/io)aGFj, a„=o 
forms a basis ofCn- 


Proof Let h £ Cn and g G Tn-i such that h = g (B Unig). Let U C ¥2 such that 
g = Then On = 0 for any a £ll and 

^ = 0aGW 

= 0aGW ® 0aGW 
= 0aGW 

The following proposition gives a link between a Boolean function / and the cor¬ 
responding coincident function ifin{f) = f (B g,n{f). 

Proposition 23 Let f a Boolean function, U = support{f) and h = Tnif), then 
h{a) = 1 if and only if there is an odd number of u £11 such that u < a. 

Proof Let u £ U, hu = x'^ ® Mu = 0„^„ Hence h = 0„g;^(0„^„ Mv). Let 
U^a = {u £U,u < a], for any a G F 2 . Since h{a) = ®u£U-.a = 1 T only 

if the cardinality of U^a is odd. 


Proposition 24 The Boolean function with n variables xi ^ 


) Xn is coincident. 


Proof Let / = nr=i(l ® = 1 if and only if u = On. Let On = (0,..., 0) and 

= (m{, ..., rin) for any j £ n}, where = 1 if and only if i = j; hence 

a;“^ = Xi. We check Proposition 23 There is no 16 ^ On and for any uj, the unique 
u < is On and /(On) = 1. 

Proposition 25 Let h = pn{f) £ Cn. Either the ANF{h) contains all the terms 
xi,... ,Xn either it contains none of these terms. 


Proof The proof is similar that Proposition 24 If /(On) = 1 (resp. 0), then all the 
monomials xi has an odd (resp. even) number of 16 ^ such that f{u) = 1. 
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4.2 Monotonic coincident functions 


Monotonic Boolean functions are commonly involved as instances of constraint 
satisfaction problems like the NP-complete SAT or 3-SAT problems, |Creignou| 


et al. (2001). Indeed these problems are monotonic in the sense where an instance 


of a set of constraints C is also an instance of any subset of C. 

We exhibit in this part monotonic coincident functions. We also provide 

a general characterization of the class of monotonic coincident functions in order 
to build more such functions. 


Definition 12 A Boolean function / is monotonic if for any u € F 2 such that 
f(u) = 1 we have f(v) = 1 for any v ^ u. 

As far as we know, the number of such functions on n variables is known as the 
Dedekind number of n and the exact values are known only for n < 8. 

Proposition 26 A Boolean function f is monotonic if there exists lnf{f) C F 2 which 
satisfies f{v) = 1 if and only if there exists u G Irif{f) with u <v. 

Proof We define Inf{f) = {u £ ¥2 \ /(w) = 1 and f{v) = 0 for any v -< m}. 
Assume that / is monotonic. Let v ^ Inf{f) and f{v) = 1. Then there exists a 
unique u G Inf{f) such that u ^ v. Conversely assume that f{v) = 1 for any v <u, 
for some u G Inf{f), then / is clearly monotonic. 



Fig. 3 Lattice for monotonic boolean functions. 


Since / = 0iigFj f monotonic when for any u such that fdu = 1, 
Pv = 1 for any v ^ u. 

For example, Mv are monotonic functions and hu = Mv are 

monotonic coincident functions. 

Proposition 27 Let u £ ¥2 and u = (mi © 1,..., © 1). Then fu = hu ® h^ ® 

xi ... Xn IS a monotonic coincident function. 

Proof Let V £ F 2 . If hu{v) = hu(y) = I then u < v and u < v, hence « = (!,...,!) 
and fu{v) = 1. Assume that v ^ (1,...,!), if hu{v) = 1 or hu{v) = 1 then 
fu{w) = 1, for any v ^ w. 

We have yet exhibit 2"“'“^ monotonic coincident functions but other constructions 
over the Boolean lattice could be performed. 
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4.3 Construction of the class of coincident symmetric Boolean functions 


Symmetric Boolean functions have good implementation since the number of re¬ 
quired gates is linear in the number of variables. In Canteaut and Videau (20051, 
the authors proposed an extensive study combined with cryptographic parameters 
like degree, correlation-immunity, non-linearity. We present here an algorithm to 
generate all the coincident symmetric functions. 


Definition 13 (Symmetric (Boolean) functions) Let k < n, will denote the 
Boolean function with n variables which is the sum of monomials of degree k. A 
symmetric function / of Tn is defined by 

n 

k =0 

where (Aq, . •., An) £ satisfies 

^ _ f 1, if all the monomials of degree i occur in the ANF of f; 

* (0, otherwise. 

We will note A(/) = (Aq, ..., An). 

Since a symmetric function is invariant by permutation of the variables, 
we have another definition of a symmetric function over the valuations. Let 
a = (ui, . . . Un) £ ^2 7 


/(ai, . . . , Un) / 7 ••• 7 ^cr(n))5 

for any permutation a of {1,... n}. 

Then the value of f(a) only depends of the weight of the valuation a. Let 
v{f) = (vo ,..., Un), where Vk = f{a), for any a £ of weight k. 

Since a symmetric Boolean function may be defined by fixing A(/) = (Aq, ..., An) 
or v{fn) = (vo, ■ ■ ■ ,Vn), we have 2"+^ symmetric Boolean functions. Furthermore, 
d(f) is the largest i such that A^ = 1 and wnif) is Yh=o (!)■ 

Let f = f^(B Xnffi be a symmetric function with n variables, where and 
are Boolean functions with n — 1 variables. 

For i £ {l,...,n — 1}, the ANF of / contains all the monomials of degree i 
if and only if the ANF of contains all the monomials of degree i. Thus is 
a symmetric function. Furthermore for i € {0,..., n — 1} the ANF of / contains 
all the monomials of degree i -|- 1 if and only if the ANF of contains all the 
monomials of degree i. Hence is also a symmetric function. 

We define 

A(/) = (Ao,...,A„); 

a(/0) = (a8,...,a°_i); 

= (-^Oi ■ ■ ■ > ^n-l)- 

We have Ai = A° = Ai_i, for any i € {1,..., n — 1}, An = An_i and An = 1 if and 
only if the ANF of / contains the monomial xi ... x„. 

( 

Definition 14 (Luca’s coefficients) Let fc, j € N and p{k,j) = ( . I mod 2. 
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Proposition 28 Let f be a symmetric Boolean function with n variables, 
v{f) = (vo, ..., v„) and X(f) = (Aq, • •., A„). The following system holds 

i 

Vj = ^ Afc p{k,j). 
k =0 

Proof Clearly vq = Aq. Let j £ {0,...,n} and a = ^ T 2 such that 

WH{a) =j. By 0, 

/(«) = 0 Tn{f){u)a'^. 
u-^a 

For k < j, we have (*) b € ¥2 such that wnib) = k and b ^ a. We have to deal 
with two cases 

1 . Afc = 1 and yin{f){h) = 1 for any b ^ a such that wnib) = k. 

2. Afc = 0 and /tn(/)(6) = 0 for any b ^ a such that wnib) = k. 

It follows 

/(“)=0^fc 

Notation 7 Let k = fcj 2* and j = 2-adic representation of k 

and respectively j. We will write j ^ k when ji = 1 implies fcj = 1, for any i € N. 

By Lucas’ Theorem p{k,j) = 1 if and only if j ^ fc and by dehnition of Mobius 
transform, 

v{f) = X{pn{f)) and A(/) = w{p„(/)). 


Proposition 29 With the previous notations, we have X{pn{LJn)) = {'^o, ■ ■ ■ ,Vn), 
where 

f = 0, for j <k 

4 = 1 ( 9 ) 

I Vj = p{j, k), for k <j <n. 


We have already seen the symmetric coincident functions 1 ( 
sition ‘ 


'iXl ( 


iXn (Propo- 


24) which corresponds to v{f) = (0,1, 0,, 0). We are looking for the whole 


class of such functions. 


Recall that h{E^) = ® fj,n{En), X{h{En)) = (wq, ... ,Wn), where wf = v’f, 

for any i ^ k and = 0. 

Since a sum of symmetric functions still a symmetric function, a sum of sym¬ 
metric coincident functions still a symmetric coincident function. Hence SCn the 
set of symmetric coincident function is generated by the h{Ej^) is a vector space 
of dimension 2\ for some I G n + 1. Remark that for some ki and ^2 G {0,..., n}, 
k\ < k 2 , we may have h^E^f) = h{En^). 

Let CSn the set of coincident symmetric Boolean functions. Since the sum of 
two coincident functions is a coincident function and the sum of two symmetric 
functions is a symmetric function, CSn is a vector space. 


|CS„| =2LtJ+i. 


Proposition 30 
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Proof We show that 

( ICSil = 2 

< |CSn| = |CSn-i| if n is odd 
[ = 2\CSn-i\ if n is even. 

For n = 1, f{x\) = x\ is the unique coincident symmetric Boolean function differ¬ 
ent from Oi, \{f) = (0,1) and A(0i) = (0,0). 

Let n > 1 and f = f%(B Xnfji be a symmetric function with n variables, where 
and are Boolean functions with n — 1 variables. 

Let A(/) = (Aq, ..., An) and v{f) = {vq, , Vn), f is coincident if and only if 
Hf) = v{f). 

Let j be any element of {0,..., n}. By implying (|^ we obtain 

Vj = Aj © f A/j , 

= Aj © ( Afe p{j, k)^ . 

Then / is coincident if and only if 

^ Afc p(j, k) = 0, for any j G {0,..., n}. (10) 

k<j 

We have seen that A(/]^) = (Aq, ..., A„_i). Furthermore 

!*"(/) = Mn(/_R) © pn{fii) 

= {l®Xn)pn-l{fR)®XnPn-l{fli) 

= Mn-l(/fl) ©a;n(pn-l(/ij) ©/rn-l(/]j))- 

Then / is coincident if and only if 


r f‘n-l(/^) = fn 

\ hn-l(/fl) = /fl ® fn- 


The first equation implies that is a symmetric coincident function and it just 
remains to check the last equation of (101 


^ Afc p{n,k) = 0. 

k<.n 


Case n is even 

p{n, 1) = 0 and it is easily seen that p{n, k) = 0 for k odd andp(n, k) = p{n—2, k—2), 
for k even. Then we have to check 

^ Afc p(n - 2, fc) = 0, 

k<n —2 

which is already satisfies by f^. Hence we may choose An = 

CS'n = 2C5'n-l. 


0 or 1 and 
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Algorithm 2: Enumeration 

Input: The number of variables: n £ N. 

Output: Enumeration of coincident symmetric functions with n variables. 

if n = 1 then 
I enumerate (0,0) 

^ enumerate (0,1) 

else 

if n even then 

for (Ao,. • •, An— l) of Enumeration(n — 1 ) do 
I enumerate (Aq, ..., An— i, 0) 
enumerate (Aq, ..., An— i, 1) 

else 

for (Aq, ..., An— i) of Enumfn — 1 ) do 

if Ao p(n, n) © A2 p(n, n — 2 )... © An-2 p{n, 2 ) = An-i then 
I enumerate (Aq, ..., A„_i, 0 ) 

|_ enumerate (Ao, ..., An-l, 1 ) 


Case n is odd 

Since p{n, 1) = 1, Aq p{n, n) © A 2 p{n, n — 2)... © A „-2 p{n, 2) = A„-i. Then we 
may chose An = 0 or 1, but we have a unique possibility for An-i. By the previous 
case, we know that half of the symmetric coincident function fo satisfy An-i = 0. 
Clearly \CSn\ = ICSn-i]. 

Proposition 31 Enumeration 

The Algorithm^provides an enumeration of coineident symmetric functions. 

Proposition 32 The Algorithm^provides random generation of coincident symmet¬ 
ric functions. 


Algorithm 3: UniformRandomGeneration 

Input: The number of variables: n S N. 

Output: Uniform random generation of a coincident symmetric functions with n 
variables 

if n = 1 then 

^ return uniform( {(0, 0), (0,1)}) 
else 

if n even then 

(Aq, ..., An— 1 ) ■<— UniformRandomGeneration(n — 1) 

An uniform ({0,1}) 
return (Aq, •.., An). 

else 

(Aq, . .. , An— i) ■<— UniformRandomGeneration(n — 1) 

An ^ uniform ({0,1}). 

if Ao p{n, n) © A2 p(n, n — 2)... © An-2 2) = An-i then 
|_ return (Ao,An-i, An). 

else 

|_ return (Ao,..., 1 - An-i, An)- 
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5 Experiments results 

The usefulness of coincident functions for practical applications is not yet es¬ 
tablished. Therefore a deep investigation of other cryptographically significant 
properties of Boolean functions must be conducted from a cryptographic point of 
view. We show in this part that for some aspects a random coincident function 
looks like uniform random Boolean functions. We consider the Hamming weight, 
the distribution of the degrees (the number of monomials for each degree), the 
balancedness and the nonlinearity. Other investigation like propagation criteria, 
algebraic immunity may also be considered. 


5.1 Correlation-immune Boolean functions 


Correlation immunity of a Boolean function is a measure of the degree to which 
its outputs are uncorrelated with some subset of its inputs. In Siegenthaler (19841, 
the author shows the importance of this property in cryptography. 

The table below gives the number of correlation-immune functions of order 1 
for fix Hamming weight for n < 5. We write cori(n) the total number of correlation- 
immune functions of order 1 with n variables. 

Remark that the only 1-resilient in this table is the function with 2 variables 
Xl(B X2- 


n\m 

0 

2 

4 

6 

8 

10 

12 

14 

18 

22 

30 

Total 

cori (n) 

1 

1 











1 


2 

1 

1 










2 

4 

3 

1 


1 









2 

18 

4 

1 

3 



3 


1 





8 

648 

5 

1 



5 


70 



70 

5 

1 

152 

3140062 


5.2 Hamming weight distribution 

We observe that Cn and Tn follows a similar weight distribution. The Figurej^gives 
the distribution of Hamming weight for 1000 uniform random generated Boolean 
functions over Cn and Tn, with n = 20. The Hamming weight w is normalized by 
the mean 2"“^, so the abscissa will be w' = m;/ 2"“^. It is easily shown that the 
distributions are very similar. 


5.3 Algebraic degree distribution 

We show experimentally that random coincident functions follow the same al¬ 
gebraic degree distribution than any random Boolean function. Let / and g be 
Boolean functions uniformly randomly generated over respectively Cn and Tn, we 
consider the number of monomials of degree d for each d £ {0,..., n}. For any d, 
the expected value should be close to (2)/2 in the case of g. We have used several 
times the Kolmogorov-Smirnov statistical test to show that the distributions are 
very closed. Of course if we consider just one degree d, its is possible to distinguish 
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Histogram of Hammlng_weight 


Histogram of Hammlng_welght 



Random functions over C 20 


Random functions over ^20 


Fig. 4 Hamming weight distributions for coincident and boolean functions with 20 variables. 



Degree 


Degree 


Random function over C20 Random functions over T20 

Fig. 5 Degree distribution of Boolean functions with 20 variables. 


the distributions since in / we have either all the monomials of degree 1 or neither 
(Proposition |24[) . The Figure 


5.3 


in a single random generation of / and g. 


5.4 Balancedness 

A Boolean function of n variables is balanced when wnifn) = 2"“^. It is easily 
seen that the probability that a random Boolean function is balanced is equal to 

/ 2" \ 

2 ^'^^ ■ We obtain every close frequencies when we generates random coincident 
function under n < 20. Further investigations should proved this statement for any 
n G N. 
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Random functions over Cio 



Random functions over 



Random functions over Cn Random functions over 
Fig. 6 Nonlinearity distributions for coincident and boolean function with 10 and 11 variables. 


5.5 Non-linearity 


The non-linearity is the Hamming weight distance to all the affine Boolean func¬ 
tions. It is shown that Boolean functions must have a high nonlinearity to ensure 


confusion, an important property in cryptographic context! 

Carlet ( 

2010 |), in par- 

ticular to avoid fast correlation attacks! 

Canteaut and Trabbia 

(2000) 

Chepyzhov 


and Smeets (19911). The functions which reach the best nonlinearity are called bent 
functions, they occur when n is even and they have nonlinearity 2”“^ — 2"/^“^. 
On the other hand, the best nonlinearity of Boolean functions in odd numbers of 
variables is strictly greater than the quadratic bound -2”“^ —2^^- for any n > 7. 
See (Carlet (20101) for a good introduction of the nonlinearity property and the 
bent functions. 


Let h £ Cn, there exists a unique g £ Tn-\ such that h = (1 © Xn)g>n-i{g) (B Xng 
(Proposition 131. Let In G Cn, the set of affine functions with n vari¬ 
ables. There is In-l G Cn-l such that Z„ = (1 © Xn)ln -1 © Xnln-l 
or Z„ = (1 © © 1). Hence d(h,ln) = WH{‘fin-i{g),ln-i) + 

WH{g,ln-i) or d{h,ln) = WH{Vn-i{g),ln-i) + wnig © l,ln-i)- A random h oi C 
should have the same distance from the affine functions from any random Boolean 
function if the there is no correlation between the distances wjy(ipn-i{ 5 ), Zn-i) 
and WHig® l,Zn-i)- 


We observe experimentally that this is the case. In Figurej^ we consider n = 10 
and 11 and we build 1000 random functions over Cn and 1000 over Tn and we 
compute the frequency of each nonlinearity value. Remark that bent functions 
have nonlinearity 2® — 2“^ = 496. We consider even and odd values of n because 
the nonlinearity behaviour is very different in these cases. 
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6 Conclusion 

Our paper presents an innovative way to manipulate the Mobius transform, with 
the distinction between variables abd indeterminates. This allows us to highlight 
new properties of coincident functions. We may also move easily from Shannon de¬ 
composition to Reed-Muller decomposition or vice versa. We show how the Boolean 
lattice is colored in the case of coincident functions, which gives a method to build 
monotone functions, and we provide a method to build and generate uniformly 
the symmetric coincident functions. Thanks to a uniform random generator over 
all the coincident boolean functions, we establish experimentally that for the most 
common characteristics (Hamming weight, distributions of the monomials degree, 
balanceness), a coincident function looks like any Boolean function. This exper¬ 
imental work could be completed by further properties. Notice that our random 
generator of coincident functions requires the computation of a Mobius transform 
with n — 1 variables. We may avoid this problem with the use of the basis of co¬ 
incident functions but it is not an efficient way. Direct random generation and 
enumeration will be a challenge. Another promising perspective will be to propose 
algorithms which compute the Mobius transform with low complexity for a larger 
part of Boolean functions, standed by our new properties. Based on all these re¬ 
sults, we therefore recommand to use this class of functions, especially in order to 
build Boolean functions with good cryptographic properties. Specific constructions 
with trade-off between cryptographic criteria seems really feasible. 
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